CVE

Id
3149  
CVE No.
CVE-2001-0328  
Status
Candidate  
Description
TCP implementations that use random increments for initial sequence numbers (ISN) can allow remote attackers to perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN.  
Phase
Modified (20161125)  
Votes
ACCEPT(7) Baker, Cole, Magdych, Renaud, Wall, Williams, Ziese | MODIFY(1) Frech | REVIEWING(1) Christey  
Comments
Frech> XF:tcp-seq-predict(139) | Christey> It could be argued that this is a "class" of vulnerability in which | several stacks have the problem. | Also need to add references. | Christey> Consider adding BID:2682 | Christey> HP:HPSBUX0207-205 | URL:http://archives.neohapsis.com/archives/hp/2002-q3/0031.html | Christey> COMPAQ:SSRT-547 | URL:http://archives.neohapsis.com/archives/tru64/2002-q3/0017.html | HP:HPSBUX0207-205 | URL:http://archives.neohapsis.com/archives/hp/2002-q3/0031.html  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
13125 3149 CVE-2001-0328 SGI:20030201-01-P  View
13126 3149 CVE-2001-0328 URL:ftp://patches.sgi.com/support/free/security/advisories/20030201-01-P  View
13127 3149 CVE-2001-0328 CERT:CA-2001-09  View
13128 3149 CVE-2001-0328 URL:http://www.cert.org/advisories/CA-2001-09.html  View
13129 3149 CVE-2001-0328 BID:2682  View
13130 3149 CVE-2001-0328 URL:http://www.securityfocus.com/bid/2682  View
13131 3149 CVE-2001-0328 OVAL:oval:org.mitre.oval:def:4922  View
13132 3149 CVE-2001-0328 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4922  View
13133 3149 CVE-2001-0328 SECUNIA:8044  View
13134 3149 CVE-2001-0328 URL:http://secunia.com/advisories/8044  View
13135 3149 CVE-2001-0328 SREASON:57  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64065 JVNDB-2001-000039 複数ベンダ製品において TCP イニシャルシーケンス番号が予測可能な脆弱性 TCP 初期シーケンス番号 (ISN) で用いられる擬似乱数生成機構には、作られた乱数の分散が不十分になり、ISN の予測が可能となる脆弱性が存在します。 CVE-2001-0328 3149 5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000039.html  View